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A m endments: to Claims; 

Tills listing of claims will replace all prior versions and listings of claims in the 
ii ilant application: 

L i lut ing of Claiims: 

1 . (Currently Amended) A method for performing secured communications 
3< aveen a Voice Browser and a network device, said Voice Browser and network 
i< nc^ exchanging VoiceXML-based Web content comprising the steps of: 

a Voice Bro wser receiving an audible request from a user, said audible request 
2< i tf g a request for Web content: 

responsiv e to said audible request, the Voice Browser transmitting a request to 
h laetwork device associated with the Web-based content to establish a secured 
:c Hmunicatioia session between the Voice Browser and the network device; 

authenticating the network device; 

subsequent to said authentication, negotiating a shared secret between the 
le i vcork device and the Voice Browser; 

encrypting the VoiceXML-based Web content using said shared secret as an 
i:i].:cyptionkey; 

exchanging the encrypted VoiceXML-based Web content between the 
I le .^mxk device and the Voice Browser; [[and,]] 

decrypting the VoiceXML-based Web content using said shared secret as a 
< le r/ption key[[.]] : and 

—^thirVoiceBrows er^^ 
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2 (Origin al) The method of claim 1, wherein said step of authenticating the 
n tvvork device comprises the steps of: 

transmi;tting a digital certificate from the network device to the Voice 
B owser, said digital certificate having a public key and a reference to a certificate 
aiiUiiority; and, 

validating said certificate authority. 

3. (Original) The method of claim 2, wherein said digital certificate is an 
X IJOQ-complwmt digital certificate. 

I, (Original) The method of claim 1, further comprising the step of 
u ihenticating the Voice Browser. 

(Original) The method of claim 4, wherein said s tep of authenticating the 
/ ice Browser comprises the steps of: 

transmiitting a digital certificate firom the Voice Browser to the network 
k said digital certificate having a public key and a reference to a certificate 
ii]ib.ority; and, 

validating said certificate authority. 

'K (Original) The method of claim 5, wherein said digital certificate is an 
! C. 109-compliant digital certificate. 

(Originfil) The method of claim 2, wherein said step of authenticating the 
I le ivork device? further comprises the step of challenging the network device. 
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8 (Original) The method of claim 5, wherein said step of authenticating the 
\ :iiice Browser ftirther comprises the step of challenging the Voice Browser. 

9 (Original) The method of claim 7, wherein said step of challenging the 
n (work device comprises the steps of: 

encrypting a message using said public key contained in said digital 
:m dificate; 

transmitting said encrypted message from the Voice Browser to the network 
i\ i^ice; 

decrypting said encrypted message using a private key corresponding to said 
pi J)lic key; and, 

transmitting the decrypted message to the Voice Browser, 

K (Original) The method of claim 8, wherein said step of challenging the 
V Browser: comprises the steps of: 

encrypting a message using said public key contained in said digital 
;c i tificate; 

transmitting said encrypted message from the network device to the Voice 
3] :rcvser, 

decrypting said encrypted message using a private key corresponding to said 
)i :»lic key; and, 

transmiiting the decrypted message to the network device. 

1 (Original) The method of claim 1, wherein said negotiating step comprises 
h jitepsof: 

generating a key for use in a symmetric cryptographic algorithm; 
encrypting said generated key with said public key; 
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transmitting said encrypted key to the network device; and. 
decrypi^ing said key in the network device with a private key corresponding to 
Sj id public key. 



I . (Original) The method of claim 1» wherein said negotiating step comprises 
ti \ steps of: 

generating a key for use in a symmetric cryptographic algorithm; 
encrypting said generated key with said public key; 
transmitting said encrypted key to the Voice Browser; and, 
decrypting said key in the Voice Browser with a private key corresponding to 
i public key, 

I ; (Originial) The method of claim 1 » further comprising the steps of: 

exchanging a list of supported symmetrical cryptographic algorithms for the 

i< vrark device and the Voice Browser; 

selecting a symmetrical cryptographic algorithm from said list; and. 
perfoHDiing said encrypting and decrypting steps using said selected 

;> jimetrical cryptographic algorithm. 

(Originiil) The method of claim 1, wherein said Voice Browser is a 
/' i ceXML Browser Server. 

f (Currently Amended) A method for performing secured communications 
n .1. Voice Browser comprising the steps of: 

a Voice Browser receiving an audible request from a user said audible request 
; >e I n |3 a request for Web content; 
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respontiive to said audible request, the Voice Browser t rflngmitting a request 
fi xn the Voic e Browser to a network device associated with the Web-based content 
fi r a secure cjommunications session between the Voice Browser and the network 

d vice; 

receiving froni the network device a digital certificate containing a public key 
ai id a reference to a certificate authority^ 

authenticating the network device based on the digital certificate; 

subsequent to said authentication, negotiating a shared secret with the network 
iM^ice; 

encrypting data using said shared secret as an encryption key and transmitting 
u dj encrypted data to the network device; [[ and^]] 

receiving encrypted Web content from the network device and decrypting the 
A \b content using said shared secret as a decryption ke v: and, [[.]] 

the Voice Browser audiblv presenting the decrvpted Web content to said user. 

l< (Original) The method of claim 15, wherein said transmitting step further 
:c :rrprises the atep of: 

transmitting to said network device a list of supported encryption algorithms 
b use in said encryption and decryption steps> 

said network device selecting an encryption algorithm from among said Ust, 

.1 (Originiil) The method of claim 16, wherein said data is encrypted using 
a d selected <3ncryption algorithm and said Web content is decrypted using said 
■ m :ryption algorithm. 

i (Original) The method of claim 15> wherein said digital certificate is an 
C i()9-complignt digital certificate* 
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1 . (Original) The method of claim 15, wherein said Web content is a 
V :iiiceXML document, 

2' . (Original) The method of claim 19, wherein said Voice Browser is a 
V ) I'iceXML Browser Server, 

2 , (Currently Amended) A machine readable storage, having stored thereon 
a (jomputer firogram for performing secured communications between a Voice 
B :jwser and t\ network device, said Voice Browser and network device exchanging 
W liceXML-based Web content, said computer program having a plurality of code 
se itjons executable by a machine for causing the machine to perform the steps of: 

a voice browser r eceiving an audible request from a user, said audible request 
:rf g a requestJbr Web content^ 

responsive to said audible requests the Voice Browser transmitting a request to 
h network device associated with the Web-based content to establish a secured 
5C lamunication session between the Voice Browser and the network device; 

authenticating the network device; 

subsequent to said authentication, negotiating a shared secret between the 
le v/ork device and the Voice Browser, 

encrypting the VoiceXML-based Web content using said shared secret as an 
i n iryption key; 

exchang;ing the encrypted VoiceXML-based Web content between the 
I le \vor\i device; and the Voice Browser; [[and,]] 

decrypting the VoiceXML-based Web content using said shared secret as a 
I le ryption key[[,]] ;and 

the Voice Browser audibly presenting the decrypted Web content to said user, 
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2 •. (Origitial) The machine readable storage of claim 21, wherein said step of 
a thenticating the network device comprises the steps of: 

transra:itting a digital certificate from the network device to the Voice 
B 'ciwser, said digital certificate having a public key and a reference to a certificate 
aiillaority; and, 

validating said certificate authority. 

2: . (Original) The machine readable storage of claim 22, wherein said digital 
z\ clificate is m X,509-conpliant digital certificate. 

I' . (Original) The machine readable storage of claim 21, for further causing 
;h ' tnachine tO' perform the step of authenticating the Voice Browser. 

Vi (Original) The machine readable storage of claim 24, wherein said step of 
a ibenticating the Voice Browser comprises the steps of: 

transmitting a digital certificate from the Voice Browser to the network 
ie /ice, said digital certificate having a public key and a reference to a certificate 
iv-hmty; and, 

validating said certificate authority. 

!f (Original) The machine readable storage of claim 25, wherein said digital 
1 :e llficate is an X.509-compliant digital certificate. 

: :7 (Original) The machine readable storage of claim 22, wherein said step of 
1 u lienticating the network device further comprises the step of challenging the 
ue work device. 
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2 . (Original) The machine readable storage of claim 25, wherein said step of 
ai lJienticating the Voice Browser further comprises the step of challenging the Voice 
B u-wser. 

2l . (Original) The machine readable storage of claim 27, wherein said step of 
z] allenging the network device comprises the steps of: 

encrypting a message using said public key contained in said digital 
3< ijficate; 

transmitting said encrypted message from the Voice Browser to the network 

1( /ice; 

decrypting said encrypted message using a private key corresponding to said 
31 -^lic key; and, 

transmi tting the decrypted message to the Voice Browser- 

K (Original) The machine readable storage of claim 28, wherein said step of 
enging th<5 Voice Browser comprises the steps of; 
encryptiing a message using said public key contained in said digital 
;e lificate; 

transmitting said encrypted message from the network device to the Voice 
. JMiwser; 

decrypti^ig said encrypted message using a private key corresponding to said 
jUJiilic key; and, 

transmitting the decrypted message to the network device. 

:.l (Original) The machine readable storage of claim 21, wherein said 
I le jotiating stejp comprises the steps of: 
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generating a key for use in a symmetric cryptographic algorithm; 
encrypting said generated key with said public key; 
transmitting said encrypted key to the network device; and, 
decrypting said key in the network device with a private key corresponding to 
s;.id pubUc key. 

3 . (Original) The machine readable storage of claim 21, wherein said 
n ijotiating st<5p comprises the steps of: 

generating a key for use in a symmetric cryptographic algorithm; 

encrypting said generated key with said public key; 

transmitting said encrypted key to the Voice Browser; and, 

decrypting said key in the Voice Browser with a private key corresponding to 
\i d! public key. 

J: (Origin^) The machine readable storage of claim 21, for further causing 

li - tnachine to perform the steps of: 

exchanging a list of supported symmetrical cryptographic algorithms for the 

K vrork device and the Voice Browser; 

selecting a symmetrical cryptographic algorithm from said list; and, 
perfomi;ing said encrypting and decrypting steps using said selected 

!> : nmetrical cryptographic algorithm, 

M (Original) The machine readable storage of claim 21, wherein said Voice 
5] =>wser is a VoiceXML Browser Server. 



if (Currently Amended) A machine readable storage, having stored thereon 
i omputer program for performing secured communications in a Voice Browser, 
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Si k\ computer' program having a plurality of code sections executable by a machine 
f< c causing thtj machine to perfoim the steps of: 

a Voice Browser receiving an audible r equest from a user, said audible request 
h h m a request for Web content: 

responsiive to said audible request, the Voice Browser transmitting a request 
ft ini the Voice Browser to a network device associated winh the Web-based content 
fc • a secure comniunications session between the Voice Browser and the network 
d* vice; 

receiving from the network device a digital certificate containing a public key 
w i a referenc(5 to a certificate authority. 

authenticating the network device based on the digital certificate; 
subsequent to said authentication, negotiating a shared secret with the network 

h Hog; 

encrypting data using said shared secret as an encryption key and transmitting 
ia d encrypted data to the network device;[[ andj] 

receivirig encrypted Web content from the network device and decrypting the 
1^ !l> content using said shared secret as a decryption ke y: an.d, [[.]] 

the Voice Browser audibly presenting the decrypted Web content to said user, 

it (Original) The machine readable storage of claim 35, wherein said 
n i'lsmitting stijp further comprises the step of: 

transmirting to said network device a list of supported encryption algorithms 
b use in said encryption and decryption steps, 

said network device selecting an encryption algorithm from among said list 
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3 '. (Original) The machine readable storage of claim 36, wherein said data is 
e crypted using said selected encryption algorithm and said Web content is 
d crypted using said encryption algorithm. 

3 . (Original) The machine readable storage of claim 35, wherein said digital 
ci itlficate is aa X.509-compliant digital certificate. 
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3' . (Original) The machine readable storage of claim 35, wherein said Web 
a nlent is a VoiceXML document. 

. (Original) The machine readable storage of claim 39, wherein said Voice 
a awser is a \'oiceXML Browser Server. 
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